crash due to bit errors

The address we expects to access at that moment should be 0x0112fff0. Unfortunately, That address was null due that offset(0x7A50) from the address loaded at ebx is invalid in assembly loaded at this moment. Offset should be 0x7050 from the address loaded at ebx in correct assembly.
On top of that, As a result that I make sure that these address on the heap will be related with this crash. They and their content are fine, which are committed by proper size.
0:000> r
eax=0108e7c8 ebx=0108e7c8 ecx=00000002 edx=01422ef0 esi=00000015 edi=00000000
eip=01418bcb esp=0012f42c ebp=00503818 iopl=0 nv up ei pl nz na po nc